Enabling Secure and Efficient Video Delivery Through Encrypted In-Network Caching

• Published in: IEEE journal on selected areas in communications Vol. 34; no. 8; pp. 2077 - 2090
• Main Authors: Xingliang Yuan, Xinyu Wang, Jinfan Wang, Yilei Chu, Cong Wang, Jianping Wang, Montpetit, Marie-Jose, Shucheng Liu
• Format: Journal Article
• Language: English
• Published: New York IEEE 01.08.2016; The Institute of Electrical and Electronics Engineers, Inc. (IEEE)
• Subjects: Caching; Cryptography; Design analysis; Design engineering; encrypted in-network caching; Indexes; Networks; Protocol (computers); Protocols; secure redundancy elimination; Secure video delivery; Security; Servers; Streaming media; Traffic engineering; Traffic flow
• DOI: 10.1109/JSAC.2016.2577301
• ISSN: 0733-8716

In-network content caching has been a natural trend in emerging network architectures to handle the exponential growth of video traffic. However, due to the potentially wide attacking surfaces, caching video content in the increasingly untrusted networked environment inevitably raises new concerns on user privacy exposure and unauthorized video access. Existing encrypted protocols like HTTPs either fall short of fully leveraging in-network caching or require decrypting the traffic in the middle without guaranteeing the end-to-end security. In this paper, we present a new networked system for efficient encrypted video delivery while preserving the benefits of in-network caching. As video chunks are encrypted before distribution, we first design a compact, efficient, yet encrypted video fingerprint index to empower the network with a fully controlled capability of locating the cached encrypted chunks for given encrypted requests. We then explain how to deploy the encrypted design in our proposed architecture and present a secure redundancy elimination protocol to enable fast video delivery via leveraging cached encrypted chunks. We further discuss the full support of cache management, adaptive video delivery, and video access control. Rigorous analysis and prototype evaluations demonstrate the security, efficiency, and effectiveness of the design.